NIST

Sovereign Cryptography and the Strategic Evolution of the Guomi Suite: A Technical Analysis of SM3 and SM4

by

The global transition toward decentralised and sovereign cryptographic standards represents one of the most significant shifts in the history of information security. For decades, the international community relied almost exclusively on a handful of standards, primarily those vetted by the National Institute of Standards and Technology (NIST) in the United States. However, the emergence of … Read more

InfoSec’s Big Problem: Too Much Hope in One Cyber Database

by

The Myth of a Single Cyber Superpower: Why Global Infosec Can’t Rely on One Nation’s Database What the collapse of MITRE’s CVE funding reveals about fragility, sovereignty, and the silent geopolitics of vulnerability management I. The Day the Coordination Engine Stalled On April 16, 2025, MITRE’s CVE program—arguably the most critical coordination layer in global … Read more

NIST selects HQC as the 5th Post-Quantum Algorithm: What you need to Know?

by

The Evolution of Post-Quantum Cryptography: NIST’s Fifth Algorithm Selection and Its Impact Introduction Quantum computing is no longer just a theoretical curiosity—it is advancing towards real-world applications. With these advances comes a major challenge: how do we keep our data secure when today’s encryption methods become obsolete? Recognising this urgent need, the National Institute of … Read more

Do You Know What’s in Your Supply Chain? The Case for Better Security

by

I recently read an interesting report by CyCognito on the top 3 vulnerabilities on third-party products and it sparked my interest to reexamine the supply chain risks in software engineering. This article is an attempt at that. The Vulnerability Trifecta in Third-Party Products The CyCognito report identifies three critical areas where third-party products introduce significant … Read more